SolarWinds hack may impact cloud services from major providers such as Microsoft and Amazon, especially since the Orion software stores API keys and other security credentials.
The FBI has issued a warning about a spike in financial account takeover crimes, after fielding over 5,100 complaints thus far in 2025. Attackers are commonly impersonating bank staff and mocking up replicas of financial institution websites to obtain credentials, and in some cases are ensnaring victims via legitimate-seeming search engine ads.
Securus data scandal exposes cavalier attitude of location aggregators and mobile carriers towards location data and consumer privacy.
Privacy rules do for enterprise what enterprise won’t do for itself. Asking Big Tech to take the high road even when it hurts their profits is like asking dental patients to pull their own teeth. As long as policymakers delay robust data regulations, there aren’t any rules for Big Tech to break.
Amazon has settled a FTC privacy lawsuit involving repeated breaches of Ring video cameras by both employees and hackers. The order would require Amazon to pay $5.8 million in restitution and delete a great deal of the video it has collected over the past several years.
New security-by-design and security-by-default guidelines from a collection of federal agencies provide the first guidance of its type issued to urge manufacturers to ship devices with adequate security for the modern threat landscape.
One of China's biggest tech companies has been told to pause any rollout of new apps. Tencent is now subject to added scrutiny from the government after multiple instances of running afoul of the country's new data laws.
The Hive ransomware threat appears to be very much in retreat as the US Department of Justice recently announced the seizure of the group's decryption keys and infrastructure, including its public-facing website, by law enforcement operations.
Both WhatsApp and Signal have already indicated that they will pull their business from the UK market entirely over privacy concerns if the Online Safety Bill ultimately becomes law.
A new development in an old data breach has seen 73 million AT&T customer passcodes published to an underground forum. The data leak now appears to be as bad as originally advertised with customer contact information attached to weakly encrypted passcodes that are easily deciphered.
